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♦define CQ_LENGTH 268 /* Power of 2 */ 
struct cq | 

int head; 

int tail; 

void *(*cqa)[CQ_LENGTH]; 

I; 

static inline int cq_enqueue(struct cq *cqp, void *p) j 

int t, nt; 

if (cqp->head == 

(nt = (((t = cqp->tail) + 1) & (CQ_ LENGTH - 1)))) j 

return 0; /* Queue is full */ 
} else | 

(*cqp->cqa)[t] = p; 

cqp->tail = nt; 

return 1; 

i 



static inline void *cq_dequeue(struct cq *cqp) j 

int h; 
void *p; 

if ((h = cqp->head) == cqp->tail) j 
return 0; /* Queue is empty */ 
| else | 

p = (°cqp->cqa)[h]; 

cqp->head = ((h + 1) ft (CQ_LENGTH - 1)); 
return p; 



i 
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extern int mbuf_map(struct cq **mbuf_alloc. 

struct cq **mbuf_dealloc, int mbuLprealloc); 

extern int mbuf_unmap(); 

extern int mbuf_pull(int nbufs, int timeout); 

extern int mbuf_push(int tap_descriptor, int nbufs); 

extern int interface_tap(char *ifname, 

struct cq **detour, struct cq **revert, int mode); 

extern int interface_untap(int tap_descriptor); 
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'define PERROR (msg) jperror(mag); exit (1);| 

♦define BUSY_WAIT_ LIMIT 10 

♦define CLASS_DENY 0 
♦define CLASS.ACCEPT 1 
♦define CLASS.HOST -1 

int network_application(struct mbuf *m) | 
... process packet and return its classification. 



void drop(struct cq ♦dealloc, struct mbuf ♦m) j 
if (cq_enqueue(dealloc, m) == 0) \ 
mbuf_push(-1, 0); 
if (cq_enqueue(dealloc, m) == 0) \ 
PERR0R(" Deallocating"); 

I 



I 

main () j 

int i, class, out, nempty, tin[2], tout[2]; 
struct cq ♦alloc, ♦dealloc, ♦detour_r&[2], 

♦revert_ip_in[2], ♦detour_ip_out[2], *reverLt&[2]; 
char name[] = "fxpO"; 
struct mbuf 'm; 

/♦ Map mbufs ♦/ 
if (mbuf_map('alloc, ♦dealloc, 0) 1=0) \ 
PERROR("Mapping mbufs"); 

\ 

for (i = 0; i < 2; | /♦ Tap interfaces ♦/ 
name[3] = (i == 0) ? '0' : T; 
if ((sin[i] = interface_tap(name, *detour_rx[i], 

♦revert_ip_in[i], TAP.INPUT)) < 0) j 
PERR0R( "Tapping input"); 
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I 

if ((tout[i] = interface_tap(name, °detour_ip_out[i], 
•reverUxp], TAP_OUTPUT)) < 0) j 
PERRORfTapping output") 

1 

i 

for (nempty = 0, i = 0; ; nempty++, i = (i + 1) * 1) | 
if ((m = c<^dequeue(detour_rx[r])) 1= 0) |/° Rr pkt */ 
nempty = 0; 

if ((class = network_application(m)) == 

CLASS.ACCEPT) j /* Bridge pkt */ 

out = cq_enqueue(revert_tx[(i + 1) & 1], m); 
\ else if (class == CLASS_HOST) j /• Host input •/ 
out = cq_enqueue(revert_ip_in[i], m); 
| else | 

out = 0; 

i 

if (lout) { /* Drop if queue full or pkt denied */ 
drop(dealloc, m); 

i 

i 

if ((m = cq_dequeue(detour_ip_out[l])) 1= 0) | 

nempty = 0; /* Host output */ 

if (cq_enqueue(revert_tx[i],m) ==0) j /* Tx pkt */ 
drop(dealloc, m); /* Drop if queue full */ 

i 

i 

if (nempty == BUSY_WAIT_UMIT) j 
mbuf_pull(0, 0); /• Wait for pkt •/ 

nempty = 0; 

! 

I 



